1.1 --- a/app/main/http_options.lua	Tue Oct 20 18:15:13 2020 +0200
     1.2 +++ b/app/main/http_options.lua	Thu Oct 22 11:52:15 2020 +0200
     1.3 @@ -3,7 +3,9 @@
     1.4    return
     1.5  end
     1.6  
     1.7 -if request.get_module() == "oauth2" and request.get_view() == "session" then
     1.8 +if request.get_module() == "oauth2" and 
     1.9 +  (request.get_view() == "session" or request.get_view() == "validate")
    1.10 +then 
    1.11    local origin = request.get_header("Origin")
    1.12    if origin then
    1.13      request.add_header("Access-Control-Allow-Origin", origin)